Tijaabada xaqiijinta DNSSEC

Waxa tijaabadani kuu sheegto

DNS Security Extensions, ama DNSSEC, waxay resolver-yada u oggolaanayaan inay xaqiijiyaan xog DNS oo saxiixan. Tijaabadani waxay weydiisaa in resolver-ka la doortay diido saxiix si ula kac ah u khaldan. Taasi waxay khusaysaa asalnimada iyo dhammaystirnaanta jawaabaha DNS; ma sirgeliso codsiyada mana caddayso resolver-ka browser-kaagu caadi ahaan isticmaalo.

Sida tijaabada loo sameeyo

1. Geli cinwaanka resolver-ka aad rabto inaad tijaabiso oo dekedda DNS ee la doortay ha beddelin inta isbarbardhiggu socdo.
2. Samee hubinta domain-ka saxda ah ee saxiixan iyo domain-ka si ula kac ah u khaldan.
3. Is barbar dhig domain-ka khaldan iyadoo hubintu shidan tahay iyo iyadoo dansan tahay, iyo tijaabada xakamaynta domain-ka saxda ah.

Sida cabbirku u shaqeeyo

Server-kayagu wuxuu codsiyo DNS ah si toos ah ugu diraa resolver-ka la doortay, isagoo isticmaalaya UDP iyo TCP marka loo baahdo. Wuxuu codsadaa diiwaannada DNSSEC wuxuuna ku celiyaa xaaladda khaldan isagoo adeegsanaya bit-ka Checking Disabled.

Codsiyadani waxay ka yimaadaan shabakadda server-ka. Resolver-ka la doortay iyo kaabayaasha DNS ee domain-ka xakamaynta ayaa lala xiriiraa; tijaabadu si toos ah uma ogaato adeeg bixiyaha DNS-over-HTTPS ee browser-kaaga.

Faham natiijooyinkaaga

Xaqiijinta waa la caddeeyay

Xakamaynta saxda ahi waxay soo celisaa xog, domain-ka khaldan wuu fashilmaa marka hubintu shidan tahay, xogtiisana waa la soo celiyaa marka hubintu dansan tahay. Isku darkoodu wuxuu taageeraa xaqiijinta saxiixa.

Xaqiijin ma jirto

Resolver-ku wuxuu soo celiyaa xogta saxiixa si ula kac ah u khaldan iyadoo hubintu shidan tahay. Tijaabadan kuma diidin jawaabtaas khaldan.

Lama go'aamin karo

Waqti-dhacyo, diidmo, xakamayn sax ah oo fashilantay ama jawaabo aan is waafaqsanayn ayaa ka hortaga gunaanad lagu kalsoon yahay. Fashil keligiis ma caddaynayo xaqiijin.

Is barbar dhig ka hor iyo ka dib

1. Kaydi resolver-ka, dekedda, natiijooyinka xakamaynta iyo faahfaahinta jawaabta sidii heerka aasaasiga ah.
2. Beddel hal dejin resolver ama xaqiijin oo ku celi isla xakamaynta qalabkan.
3. Saddexda natiijo wada barbar dhig. Haddii aad beddesho dejimaha DNS ee qalabkaaga, hubi in resolver-ka halkan lagu tijaabiyay yahay kii aad rabtay inaad qiimayso.

Xaddidaadaha tijaabada

• Xaddidaadaha shabakadda ee u dhexeeya server-ka iyo resolver-ka waxay saamayn karaan natiijooyinka.
• Calaamadda xog la xaqiijiyay waxay bixisaa macne dheeraad ah, laakiin isbarbardhigga la xakameeyay ee saxda iyo khaldan ayaa bixiya caddaynta ugu weyn.

Waxa la beddelayo, haddii loo baahdo

Saxiixyo khaldan ayaa la aqbalaa

Haddii aad maamusho resolver-ka, dib u eeg dejimaha xaqiijinta; haddii kale ka fiirso resolver xaqiijiya oo la diiwaangeliyay oo mar kale tijaabi.

Xakamaynta saxda ah sidoo kale way fashilantaa

Hubi gaaritaanka resolver-ka iyo gelitaanka dekedda DNS ka hor intaadan fashilka DNSSEC u nisbayn.

Su'aalaha inta badan la isweydiiyo

Ilaha iyo tixraacyada farsamada

• RFC 4033 · DNSSEC